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Abstract 

In this paper, the polynomials P a {x) = x 2l+1 + x + a with a e GF(2 fc ) are 
studied. New criteria for the number of zeros of P a {x) in GF(2 fc ) are proved. 
In particular, a criterion for P a {x) to have exactly one zero in GF(2 fe ) when 
gcd(7, k) — 1 is formulated in terms of the values of permutation polynomials 
introduced by Dobbertin. We also study the affine polynomial a 2 x 2 + x 2 + 
ax + 1 which is closely related to P a {x). In many cases, explicit expressions 
for calculating zeros of these polynomials are provided. 

Key words: Equation over finite field, linearized polynomial, permutation 
polynomial, root. 



1. Introduction 

Denote GF(2 fc ) a finite field with 2 k elements, let GF(2 fc )* = GF(2 fc ) \ {0} 
and GF(2 fe )** = GF(2 fe ) \ {0, 1}. Take positive integers k and I with I < k. 
The focus of this paper are the following polynomials over GF(2 fe ): 

P a (x) = x 2 ' +1 + x + a 

with a G GF(2 fc )*. It is clear that P a {x) does not have multiple roots. These 
polynomials have recently arisen in several different contexts that include 
final geometry, constructing families of difference sets with Singer parameters 
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[l| and finding crosscorrelation between m-sequences 0, 0, 0]. First, we 
consider a particular case when / is coprime to k (which leads to an interesting 
new technique based on the use of Dobbertin polynomials) and then we take 
a general case with gcd(7, k) > 1. With our results, we are able to distinguish 
between the case when P a {x) has none and the case when it has two zeros in 
GF(2 fc ) if gcd(/, k) > 1. This is considered to be a hard problem in general. 
Finally, we study the roots of the following affine polynomial which is shown 
to be closely related to P a (x) 

F a (x) = a 2 V 2i + x 2 ' + ax + 1 . (1) 

Polynomials f(x) = x pl+l + ax + b over a field of characteristic p with 
an arbitrary I were recently extensively studied by Bluher in her paper 
Thus, here we consider a particular instance of this problem. However, as a 
main result of the paper, we prove new criteria for the number of zeros of 
P a (x) in GF(2 fc ). For instance, if gcd(7, k) = 1 then the absolute trace of the 
particular value of the Dobbertin permutation polynomial defines whether 
P a {x) has a unique zero or not. We also give explicit polynomial formulas 
for calculating zeros in case when zero is unique or there are exactly two 
of them and k is odd. Note that f(x) can always be transformed into the 
form x p +1 + x + c by a simple substitution of variable x with sx having 
s p = a (such an s 6 GF(p k ) always exists). Moreover, even a more general 
polynomial form x p +1 + ax p + bx + c can be reduced to f(x) by setting x 
equal to x — a. 

In the particular case when 1 = 1, the equation P a {x) = takes on the 
form D 3 (x) = a where D 3 (x) = x 3 + x is the third Dickson polynomial (a 
comprehensive reference on this topic is \^). Denote 

Hi = {xe G¥{2 k Y | Tr^aT 1 ) = i} for % = 0, 1 

r = gcd(3,2 fc — 1) and T\ = gcd(3, 2 k + 1). Obviously, r = 1 and r\ = 3 
(resp. vq = 3 and r\ = 1) for k odd (resp. k even). From the well-known 
fact (see 0, 0, Proposition 5] or 0, Lemma 18]) if follows that D 3 (x) is a 
r -to-l mapping of 7i \ {1} into TCo and is a ri-to-1 mapping of TCx \ {1} into 
Hi. Therefore, for odd k (resp. even k) D 3 (x) = a has a unique solution in 
GF(2 fc ) if and only if a e TCo (resp. a G Hi) which for any k is equivalent to 
Trfc(a _1 + 1) = 1. In the other cases this equation can have either none or 
three solutions. 
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By the time the earlier version of this paper [8| was published, we where 
able to prove many relevant results assuming additional restrictive conditions. 
In the current paper, just Section [3] almost has not been changed compared 
to (§]. Sections [2] and H] had been considerably revised to contain the results 
under the the most general conditions, some proof were rewritten in a simpler 
way. Sections [S] and [H] are completely new. We believe that a paper containing 
patches to [8( would be extremely reader- unfriendly since we would have to 
refer not just to the previous results but to the parts of the proofs in [8j. That 
is why we decided to submit a self-contained paper that does not require any 
prior reading. 

2. Preliminaries 

The finite field GF(2 d ) is a subfield of GF(2 fe ) if and only if d divides 
k. The trace and norm mappings from GF(2 fe ) to the subfield GF(2 d ) are 
defined respectively by 

k/d-l k/d-l 

Tr*(x) = £ x* A and N*(x) = J] **" ■ 

i=0 i=0 

In the case when d = 1, we use the notation Trk(x) instead of Tr^(x). In this 
paper, also let Mi denote the number of a e GF(2 fc )* such that P a {x) has 
exactly i zeros in GF(2 fc ). 

If I is coprime to k, denote I' = Z _1 (mod k) and recall the following 
sequences of polynomials that were introduced by Dobbertin in [i| (see also 



Ai(x) = x 
1 2 



A 2 (x) = x 2+1 



Ai + 2{x) = x 2il+1)l A i+1 (x) + x 2<!+1)! Tl Ai(x) for i>l, 
Bi(x) = 0, 



B 2 (x) = X 2 " 1 



B l+2 {x) = x^B^ + x^-^B^x) for i>\. 

These are used to define the polynomial 

v 

R(x) = ^A i {x) + B v (x) . (2) 

8=1 
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As noted in j9(, the exponents occurring in Aj(x) (resp. in Bj(x)) are pre- 
cisely those of the form 

i-i 

e = ^(-l) £i 2 iZ 

i=0 

where e, G {0, 1} satisfy e 3 -_i = 0, e = (resp. e = 1), and (e*, ej_i)_^ (1, 1). 

Further, we will essentially need the following result proven in [9|, Theo- 
rem 5] that the polynomial 

q {e) (x) = T ' l=1 f +1 +e for 6 = 0,1 (3) 

is a permutation polynomial on GF(2 fc )* if and only if e = I'+l ( mod 2). (To 
be formally more precise, we get a polynomial q( e ' (x) ifa;-( 2i+1 ) is substituted 
by x^ 2 _1 ) _ ( 2 In the sequel, we simply use q{x) instead of q^(x) for 
e = I' + 1 (mod 2). Moreover, g(x) and i?(x _1 ) are inverses of each other 0, 
Theorem 6], i.e., for any nonzero u, v G GF(2 fc ) with g(it) = t> _1 it always 
holds that R(v) = u. In and in the rest of the paper, whenever a positive 
integer e is added to an element of GF(2 fe ), it means that added is the identity 
element of GF(2 fc ) times e (mod 2). 

In the general case when gcd(/, k) — d > 1, let k — nd for some n > 1 
and introduce a particular sequence of polynomials over GF(2 fe ). For any 
u G GF(2 fc ) denote Ui = u 2 * for % = 0, . . . , n — 1 and let 

Ci(x) = 1, 
C 2 (x) = 1, 

C i+2 (x) = C i+1 (x) + XiCi(x) for l<i<n-l. (4) 
Lemma 1 For any u G GF(2 fc ) and i G {1, . . . , n — 1} 

C i+2 («) = C^O) + UiCf' («) and (5) 

c?( W )Q +2 ( W )+cjf(«)=n^ • ( g ) 

Proof. Both identities are proved using induction on z. For i — 1 and 
i = 2 the correctness is easily checked taking the definition. Assuming the 
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identities hold for % < t we get for i = t > 2 

>t{u) 

i2 l I \ , ri2 2t i \ , ri2 l ( \ , ri2 21 



C t+ 2(u) ® C t+ i(u) + u t C t (u) 



= C; (u) + uxC;_ x {u) + UtC^u) + u t u x C;_ 2 {u) 
= {C t {u) + u t _ 1 C t _i(«)) 2 ' + ui(Ci_i(«) + ^_ 2 a_ 2 ( M )) 22i 

i < 1 («)+ Wl C t ( W ) 22! 

and 

cf(«)C t+2 («)+Cg+ 1 (t») 

(CtiCu) + u^C* 2 H)(C m (u) + u*C t (u)) + (C t (u) + u t ^C t ^(u)f +1 
ClMCt+M + C? +1 (u) + u t „MCl 2 (u)C t (u) + C&^u)) 
+ u t _i(C 2 l 2 («)C t+1 («) + CU(u)cf («)) 



(4) 



t-1 



=n%+n 

+ «t_i(cf 2 ( W )(a(w) + «t-ic t _i(u)) + a-i(«)(a-i(«) + u t ^c t ^( u )f) 
t-i t t 

= +U u + u t -i(ct 2 (u)c t (u) + ci\\u)) = n«i 

(j3J) can be seen as an equivalent recursive definition of Ci(x). □ 
We also define polynomials Z n (x) over GF(2 k ) as Z\{x) = 1 and 

Z n (x) = C n+1 (x) + xC^_ 1 (a:) (7) 
for n > 1. Note that for any w G GF(2 fc ) we get 

§ ^( W )+ Uo ^ f _ 1 («)+«iCf 1 ( U ) 
® C n+1 (u) + uoCjf-i(u) 



m 7 f , 

= Z n (u) 

and thus, Z n (u) G GF(2 ; ). Since GF(2 fc ) f| GF(2 ; ) = GF(2 d ), we have 
Z n (u) G GF(2 d ). The following lemma describes zeros of C n (x) in GF(2 fc ). 
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Proposition 1 Take any v G GF(2 nd ) \ GF(2 d ) with n > 1 and let 



,2 Il +l 



Oo + Vi 

Then 



V = ~ , U ..^ +1 • (8) 



Cn[V) - (v 1 + v 2 )l\{v + v 1 ) 



2 J ' 



3=2 

If n is odd (resp. n is even) then the total number of distinct zeros of C n (x) 
in GF(2 nd ) is equal to 2< ^ a J^ i ~ 1 (resp. 2( " 2 ^~ 2d y ). All zeros have the form of 

(EP with Trf(v ) = and occur with multiplicity 2 l . Moreover, polynomial 
C n (x) splits in GF(2 nd ) if and only if d = I or n < 4. 

Proof. First, note that GF(2" d ) f| GY(2 l ) = GF(2 d ) and v G GF(2 nd ) \ 
GF(2 d ) if and only if v ^ v\ which guarantees that the denominator in ([8]) 
and in the above identity for C n (V) is not zero. Now, using induction on i 
we prove that 

C l {V) = ^^W (-^—] (9) 

j — z 

for 2 < % < n + 1 . For i = 2 and 2 = 3 this identity is easily checked using the 
definition (0J of Ci(x) (for i = 2, we assume the product over the empty set 
to be equal to 1). Assuming this identity holds for i < t we get for i = t > 3 

c t (y)ic t _ 1 (y) + v t _ 2 ci_ 2 (y) 

(Ul + V3) | = 2 V^O + «l/ («t-2 + ^-l) 2 ' +1 0l + U2) | = 2 V^O + Vi 



K+^)n;= 2 (^o+^) 2j; 

* „, t-l f x 2^ 



t-2 2^ 
J=2*0 



in 



n 



(vi + f 2 ) ^ \V + Vi 

It remains to note that for i = n, in GF(2 nci ) we have 2^j=i v j = SJ=i v 

T.';;"(r„). 



2J" 
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Obviously, C n (V) = if and only if Ti^ d (v ) = which is equivalent to 
Vq = u + u 2 for some u G GF(2 nd ). This easily follows from the fact that the 
linear operator L(u) = u + u 2 on GF(2 nd ) has the kernel of dimension d and, 
thus, the number of elements in the image ofLis2 d ( n " 1 ). For anyw G GF(2 nd ) 
we have Tr^ (u + u 2 ) = leading to the conclusion that the image of L 
contains all the elements of GF(2 rad ) having zero trace in GF(2 d ) since the 
total number of such elements is exactly 2 d ( n ~ 1 \ Moreover, u GF(2 2d ) 
since vq G GF(2 d ) C GF(2 Z ) if and only if the corresponding u G GF(2 2/ ) 
and since GF(2 nd ) n GF(2 2i ) = GF(2^ cd ( n ' 2 )). It follows from the proof of 
Proposition [5] that the mapping from u G GF(2 nd ) \ GF(2 M ) via t> = u + u 2 
to V G GF(2 nd )* defined by (JSj) is (2 M - 2 d )-to-l. Therefore, we have found 
GF ^2^- ( 2d ( ' 2 distinct zeros of C n (x) in GF(2 nd ) and if n is odd (resp. n is 

even) then this number is equal to 2( ^2d^ 1 ~ 1 (resp. 2( " 22 ^~ 2d ). 

It is easy to check by induction that if i is odd (resp. i is even) then the 
algebraic degree of polynomials Ci(x) is equal to 2 ' 2; ~ 2 (resp. ) since 

degC i+2 (^) = max{degCj + i(x), 2 d + degCj(x)} = 2 %l + degCj(x) . 

Further, if we define the sequence of polynomials C[{x) for i = 1, . . . , n with 
C[(x) = C' 2 {x) = 1 and C' l+2 (x) = C' i+X {x) + x l ^ 1 C' i (x) then d{x) = C[(x) 21 
for % = l,...,n. Therefore, all zeros of C n (x) have multiplicity at least 
2 l . Now it is clear that the number of zeros having the form of dHJ with 
Tr^ d (t> ) = multiplied by 2 l is equal to the degree of C n (x) if and only if 
d = I or n < 4. 

It means that C n {x) splits in GF(2 nZ ) and zeros of C n {x) in GY(2 nd ) 
are exactly the elements obtained by (jHJ) using wq G GF(2 nZ ) \ GF(2 Z ) with 
Tr^(wo) = that result in V G GF(2 nd ). It also follows from the proof 
of Proposition [5] that polynomial fb(y) = y 2l+1 + by + b with b G GF(2 nd )* 
has exactly 2 d + 1 zeros in GF(2 nd ) if and only if 6 _1 has the form of (jHJ) 
with Trf(v ) = 0. Take any V G GF(2 nd ) obtained by (JSJ) using w G 
GF(2 n ') \ GF(2 Z ) with Trf(w ) = 0. Then f v -i(y) splits in GF(2 n ') and, by 
0, Corollary 7.2], this is equivalent to /y-i(y) having 2 d + l zeros in GF(2 nd ). 
Thus, there exists some v G GF(2 nd ) \ GF(2 d ) with Tr% d (v ) = that gives 
this V using ©. □ 

Corollary 1 If n is odd (resp. n is even) then the total number of distinct 
zeros of Z n {x) in G¥{2 nd ) is equal to 2( "^ 2 1 rf'j L 22d (resp. 2 "^dJ^O - All zeros 
have the form of and occur with multiplicity one. Moreover, polynomial 
Z n (x) splits in GF(2 nd ) if and only if d = I or n = 1. 
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Proof. Using (jHJ), it can be verified directly that C n+1 (V) = VC^V) for 
any V G GF(2 nd ) having the form of (jHJ) (the case n = 2 is easily checked 
having the definition of Ci(x)). Also, knowing the algebraic degree of poly- 
nomials Ci(x) from the proof of Proposition [H we conclude that 

deg(Z n (x)) = degC n+ i(x) 

and is equal to 2( "^ 2 1 , ) ^~ 22 ' (resp. 2(^+^-2' ) if n is odd (resp. n is even). Denote 

S = {xe GF{2 nd ) \ GF{2 d ) \ Trf{x) ^ 0} . (10) 

It follows from the proof of Proposition |4] that the mapping from v G S to 
V G GF(2 nd )* defined by (jHJ) is (2 d — l)-to-l. Recalling the corresponding fact 
from the latest proof, we conclude that the total number of distinct values 
of V obtained by (jHJ) is equal to ^ GF ^ 2 23 ]^d^ 2 ^ + being identical to the 
degree of Z n (x) if and only if d = I or n = 1. Note that two different values 
of v G GF(2 nd ) \ GF(2 d ) with zero and nonzero trace in GF(2 d ) can not map 
to the same value V using (jHJ) since C n {V) = if and only if the trace of the 
corresponding v is also equal zero. 

It means that that Z n (x) splits in GF(2 n ') and its zeros in GF(2 nd ) are 
exactly the elements obtained by (jHJ) using wo G GF(2 nl ) \ GF(2 Z ) that result 
in V G GF(2 nd ). It also follows from the proof of Propositions H] and [5] that 
polynomial fb(y) = y 2 +1 + by + b with b G GF(2 nd )* has exactly one or 2 d + 1 
zeros in GF(2 nd ) if and only if b' 1 has the form of (jHJ). Take any V G GF(2 nd ) 
obtained by (jHJ) using w G GF(2 ni ) \ GF(2 l ). Then f v -i(y) has exactly one 
or 2 l + 1 zeros GF(2 nZ ) and, by 0, Corollaries 7.2, 7.3], this is equivalent to 
fv-^iv) having one or 2 d + l zeros in GF(2 nd ) respectively. Thus, there exists 
some v G GF(2 nd ) \ GF(2 d ) that gives this V using (jHJ). □ 

Corollary 2 For any V G GF(2 fc ) having the form of |3J) with n > 2 and 
Tr k d (v ) + we have Tr* (c^TO/C^ 1 ^)) = 0. 

Proof. Using (jUJ), it can be verified directly that 

c 2 Uv) Nfc A . ^ yiE; = ^i 

^ i+1 (^) "V V Tr*(^ 
for any V G GF(2 fc ) having the form of (jHJ) and n > 2. Now note that 

n 

1*5(«i Z>i) = Tr ^ + «?) = Tr^(^o) 2 + TrM = 

i=2 
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and we are done. 



□ 



Value of Ci(x) is equal to the determinant of a three-diagonal symmetric 
matrix (note a comprehensive study of such matrices in [lQ(]). Indeed, for 
any u G GF(2 fc ) and j < i let A u (j, i) denote the determinant of matrix D of 
size i — j + 2 that contains ones on the main diagonal and with D(t, t + 1) = 
D(t + 1, t) = Uj + t-i for t — 1, . . . , i —j + 1, where the indices of Ui are reduced 
modulo n. Expanding the determinant of D by minors along the last row we 
obtain 

A u {j, i) = A u (j, z - 1) + u\ A u (j, % - 2) (11) 

assuming A u (j, i) — 1 if i — j G {—2, —1}. Comparing the latter recursive 
identity with (TjJ it is easy to see that 

A u {l,i) = Cl 2 {u) . (12) 

Moreover, from the definition of the determinant it also follows that 

A u (l, if 1 = A u (l + t,i + t) for 0<t<n-l. (13) 

Now assume d = gcd(/, k) = 1 and consider V having the form of ([S]) 
as a function of x G GF(2 fc )** denoted V(x). It is interesting that V(x) is 
closely related to polynomial mappings q( e \x) defined in ([3]). In particular, 
this connection leads to new properties of q( € \x), with e = V (mod 2), when 
it is not a permutation. Denote 

% = {x G GF(2 fc )** | Tr fe (a;) = i} for i = 0, 1 

and let V(7i) and q^ € '(%) denote multisets containing all elements (with 
repetitions) in the image of % under the corresponding mapping V(x) or 
q^(x). 

Corollary 3 Take e = V (mod 2). Then q( e >(%) = V(%), where i = 
k (mod 2), and q^(x) defines a 3-to-l mapping on %. Also, if k is odd 
then q(°\To) = V(7i) and q^°'(x) defines an infective mapping on Tq. 

Proof. It follows from the proof of Proposition [T] and Corollary [T] that V(x) 
defines a 3-to-l mapping on 7o and is injective on T[. This does not mean 
that V(%) C % for i — 0, 1 in the sense of a normal subset relation. 

Taking any x G GF(2 fc )** denote A = (x^^Xq 1 )" 1/(2 '" 1) and A = x A. 
It is easy to check that A + A 2 = A 2 . Thus, Tr^(A) = and A defines a 
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2-to-l mapping of GF(2 fc )** on % if k is odd and on ToUW if k is even. 
Therefore, 

V{%) = {V^xl 1 - 1 + Xo l )~^) | x E GF(2 fc )**, xg+x ^l\ and 

(xg +X + 1) 2+1 Zq +i 

where z — Xq + Xo + 1 G % with e = /' (mod 2) and i = k (mod 2). Note 
that I' and can not be both even and e = i = is impossible. Here we used 
that V(x) = x 1-2 /(x 1 " 2 + l) 2 +1 which is easily obtained from ([8]). Finally, 

q {e \%) = {q {e) (xl l +x + l) | x e GF(2 fc )**, xjf+xo^l} 

and x 2 ' + x + 1 defines a 2-to-l mapping of GF(2 fc )** on T\ if A; is odd and 
on 7^ 1J{0} if k is even. 

Define TJ(x) = ^"^x 2,1 on GF(2 fc ) that is a permutation polynomial if / 
is odd and 2-to-l mapping if / is even. This follows from the fact that T}(x) 
is linearized and Ti(x) = has the only solution x — if I is odd and two 
solutions x — 0, 1 if I is even (note that (TJ(x) + l)T/(x) = x + x 2 ). Therefore, 
Ti(x) is a permutation of % for any I and odd k since Tr fe (T/(x)) = if / is 
even (in this case T)(x) = Ti(x + 1)) and is equal to Tr fc (x) if I is odd. 

Dickson polynomial number 2 l + 1 can be written as D 2 i + i{x) = x 2 +1 (1 + 
Ti{x~ 1 ) 2 ) (see, for instance, [7]). If k is odd then gcd(2* + 1, 2 k - 1) = 1 and, 
by 0, -D 2 i + i(x) is a permutation on 7^o- Thus, -D 2 i + i(x -1 ) -1 is a permutation 
on T . Note that 



2 

x" ' ■"■ X /X 



D2i+l(x ^ rl " TXx) 2 + 1 " tkxTTT + ItUxTTT,' +x 

Therefore, if is odd then 



\ ( ^ i = < ; (TKX) + l+i I *° G % \ and 

(T,(x)+T 2fc (x)) 2+1 



g (0) (^(^o)) = 

3. Zeros of Pc^) when gcd(Z, k) = 1 

In this section, we analyze the zeros in GF(2 fe ) of the polynomial P a (x) 
assuming that / and k are coprime integers with I < k. In this case, denote 
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V = Z -1 (mod k) and take R(x) denned in (121) . The following Lemma [2] 
easily follows from the earlier mentioned fundamental result on permutation 
polynomials due to Dobbertin. 

Also note the fact that since VI = 1 (mod k) then 

(2 l - 1)(1 + 2 l + 2 21 + ■ • • + 2 { - l '- l)l ) = 2 11 ' -1 = 1 (mod 2 k - 1) . 

Therefore, w 2 ' ' = u 2 for any u G GF(2 fc ) and this identity will be used 
repeatedly further in the proofs. 

Lemma 2 Take F a (x) defined in (Q]j. Then for any a G GF(2 fc )*, £/ie e/e- 
meni V = i?(a _1 ) zs a zero of F a (x) in GF(2 fc ). 

Proof. Since q(x) from is a permutation polynomial on GF(2 fc )*, then 
for any fixed a G GF(2 fe )* the equation 



i 

„2'+l 



ax 



J> 2<! + z' + i (i4) 



has exactly one solution V = R(a *) in GF(2 fc )*. Raising (|T4|) to the power 
of 2 Z results in 



Z'+l 



2' 2^+2' 

a ar 



i=2 i=2 

The latter identity, after being added to (fill) and setting x = V, gives 

aV 2l+l = a 2l V 22l+21 +V 21 +V 2W 

and consecutively, since V ^ 0, F (V) = a 2 'V 22 ' + V 2 ' + aV + 1 = 0. □ 

Now we introduce a particular sequence of polynomials over GF(2 fe ) and 
prove some important properties of these that will be used further for getting 
the main result of this section about zeros of P„(x). Denote 



em 



1 + 2 1 + 2 21 + ■■■ + 2 {i ~ 1)l , for i = 1, . . . ,V 



so, in particular, e(V) = (2 l — 1) 1 (mod 2 k — 1). Now take every additive 
term x e with e 7^ in the polynomial 1 + (1 + x) e ^ and replace the exponent 
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e with the cyclotomic equivalent number obtained by shifting the binary 
expansion of e maximally (till you get an odd number) in the direction of 
the least significant bits. We call this reduction procedure. Recall that two 
exponents t\ and e 2 are cyclotomic equivalent if 2*ei = e 2 (mod 2 k — 1) for 
some i < k. For instance, x T is reduced to x and x 2 ' +2J is reduced to 
x 1+2(J 1)1 if % < j and so on. The obtained reduced polynomials are denoted 
as Hi(x) and we use square brackets to denote application of the described 
reduction procedure to a polynomial, so Hi(x) = [1 + (1 + x) e ^] for i = 
1, . . . , /'. The first few polynomials in the sequence (after eliminating all 
pairs of equal terms) are 

Hi(x) = x 

H 2 (x) = [x + x 2 ' + x 1+2 '} = x + x + x 1+2 ' = x 1+2 ' 

H 3 (x) = [x + x 21 + x 2 ' 21 + x 1+2 ' + x 1+221 + x 2l+221 + x 1+2l+2 ' 21 ] 

= x + x + x + x 1+2L + x 1+22L + x 1+2 ' + x 1+2l+22L 

= x + x 1+221 +x 1+2l+2 ' 2 ' . 

Lemma 3 If polynomials Hi(x) are defined as above then 

Tr k (H t (x)) = Tr k (l + (l + x) e ^) 
for any x G GF(2 fe ) and i — Also let 

Q(x) = (xq +1 + x )x 21 + XqX + x 
for any x e GF(2 fc )*. Then 

Q(H l ,(x^ 1 )) = (l+x )(l + x Y l ' ) ■ 

Proof. Obviously, we get the trace identity for Hi>(x) from the definition. 
Further, 

Hi(x) = [l + (l + x) e «] 

= [l + ti + xywii + xf*- 1 *] 

= [H^+x^il + xY^] 
( ^ x(l + x) e ^~ l + H t ^(x) , 

where (*) follows from the following argumentation. First, note that the 
exponents of additive terms in x(l + x) e W -1 are exactly all 2 l_1 distinct 
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integers of the form l+ti2 z H h^-i2^ -1 ^ with tj G {0, ljforj = 

and the reduction does not apply to any of these so 

On the other hand, the number of terms in [x 2<l + x) e ^^} is also equal 
to 2* _1 since the exponents in these terms are exactly all the integers of the 
form t + t x 2 l + ■■■ + t;_ 2 2 ( ^ 2)i + with tj G {0, 1} for j = 0, . . . , i - 2 

and none of these become equal after the reduction. Moreover, every such 
an exponent, after reduction, can be found in x (l + x)'®- 1 so 

[a? ii - 1)t (l+x)< i -V]=x(l+x)< i >- 1 . 

Also note that all terms of if i _ 1 (a;) are also present in x(l + x) e W -1 . Thus, 
the number of terms in Hi(x) that remain after eliminating all pairs of equal 
terms and denoted as j^Hi is equal to 2*" 1 — #Hi_i. Unfolding the obtained 
recursive expression for ifj(s) starting from Hi(x) = x we get that 

Hi{x) = x(l + (1 + xf + (1 + xf +22 ' + • • • + (1 + s)^" 1 ) . (15) 
Now we can evaluate 

= (s 2 ' +1 + x )H l ,(xo 1 f + x 2 Q H v {x^) + s 

= (xo + xf^) (l + (1 + x^f 1 + (1 + xo 1 f 1+231 + ••• + (! + xtf l+ - +21 ' 1 
+ x (l + (1 + s^ 1 ) 2 ' + (1 + x 1 ) 2;+22i + • • • + (1 + s 1 ) e(i ' ) - 1 ) + s 

= ((*o + *o 2i+1 ) + *o(l + xo" 1 ) 2 ') (l + (1 + xo 1 ) 2 " + • • • + (1 + x Y l+ - +2(l ' 

+ (so + x 2 ' +1 )(l + s 1 ) 22i +-+ 2 '' i + X + x 

= s (l + s 1 ) 2;+22i+ -+ 2i ' ; 

= s (l + s 1 ) 2+2;+22i+ - +2(; " 1); 
= (l+s )(l+s 1 ) e ( i ') 

as claimed. □ 
Lemma 4 For any a G GF(2 fe )* Ze* s G GF(2 fc ) satisfy s 2 +1 + s = a. 

Tr fe (l + (l + O e(r) ) =TT k (R(a' 1 )) . 
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Proof. Denote r = xjf 1 + x 1 (obviously r^O since x ^ 1), A = T ei - l '\ 
and further, using Lemma [3J evaluate 

Q(H P {xo 1 ))o;f ) = (1 + *b)(l + *o) e(0 = (1 + xlY l ' ] 
and thus, Q(Hi> (xq 1 )) 2 ^ 1 = r or, equivalently, 

Q(H v (xo ')) = A" 1 . (16) 

In what follows, we use the technique suggested by Dobbertin for proving 
jsl, Theorem 1]. Take the polynomial F a {x) defined in ([I]) and note that 

7~r / \ 2^ 2^ 2^ -i 

-Tal^J = a x + x + ax + 1 

2 ! 2 2i , 2 i+1 2 l , 2 ; , / 2 ; -l , — 1\ / / 2 ; +l , \ 2 ! , 2 , \ 

= a x + x Q x + x + [x Q + x o ) [{x + x jx + x x + x j 
= Q(xf + TQ(x) = Q(x) (Qixf- 1 + A-^- 1 )) 

for Xq +1 + Xq = a and, therefore, by ffTBl) . F a (Hi>(xQ 1 )) = 0. Consider the 
equation 

Q{x)+A~ 1 = (17) 

whose roots are also the zeros of F a (x). We will show that (fTTj) has exactly 
two roots with Hi^Xq 1 ) and i?(a _1 ) being among them (however, we do not 
claim that i?(a _1 ) ^ Hii{xq 1 )). Multiplying (JTTJ) by « = (xqA) -1 and using 
that (xq +1 + x )A 2!_1 = x 2 , gives 

M( x o +1 + ^o)^ 2 + %o x + x o + A^ 1 ) = (x/A) 2 + x/A + xo/i + xl/j 2 = , 

which has exactly two solutions z = Hi^x^ 1 ) (see (USD) and ^ = i/ F (x 1 ) + 
A, since its linearized homogeneous part (x/A) 2 +x/A has exactly two roots 
x = and x = A. Thus 

Using (xq + 1)A 2 ' _1 = xq it is easy to see that A 2 ' = x A + (xoA) 2 ' and we 
have Tr fc (A) = 0. 

Now we show that none of the possible roots of Q(x) = is a solution 
of (JHj). In fact, suppose that Q(z) = 0. Then, since xq ^ 0, we have 
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z 2 ' = (x z) 21 + xqZ + 1 and az 2 ' = x\z + x (since a = Xq +1 + x ). We put 
such a z into (JHJ) and compute 



v 

''4-1 . , 

az 

i=l 

i'-l 



- 1 + 5> 2li +/' + l 



= (x\z + x )z + ^(xoz) 21 ' + ^2(x z) 2U +1' + 1' + 1 

i=0 i=l 

= 1 . 

Therefore, recalling the proved identity F a (x) = Q(x)(Q(x) 2l ~ 1 +A~^ 2l ~ 1 ^) 
and keeping in mind that gcd(2 ; — l,2 fc — 1) = 1 we see that V = R(a^ 1 ) 
which is the unique solution of ffl4|) and, by Lemma [2J also the root of 
-Pa(^) = 0, satisfies Q(V) = A -1 . Recall that (fTT]) has exactly two solutions 
z = H v (xq 1 ) and z x = H^x^ 1 ) + A. Thus, i2(a -1 ) + i^(a;o x ) = A or 
R(a^ 1 ) = Hi'(x Q l ) (although we do not need in our proof that R(a^ 1 ) ^ 
Hi'^Xq 1 ), we believe that this holds) and, by Lemma [3] 

TikiRia- 1 )) = Tr k (H v (xo *)) = Tr fe (l + (1 + x Y n ) 

as claimed. □ 

Theorem 1 For any a G GF(2 fc )* and a positive integer I < k withgcd(l, k) = 
1 polynomial P a {x) has either none, one, or three zeros in GF(2 fe ). Further, 
P a (x) has exactly one zero in GF(2 fc ) if and only if Tr fc (_R(a _1 ) + 1) = 1, 
where R(x) is defined in (d)). Moreover, if P a (xo) = for some xq G GF(2 fc ) 
then 

TiuiRia- 1 )) = Tr h {H v {x?)) = Tr fc ((l + x Y n + 1) 

where polynomials Hi(x) are defined in Q3)J . Finally, the following distribu- 
tion holds for k odd (resp. k even) 



M = 2*±i [resp. ^f 1 ' 



Mi = 2 k - 1 - 1 (resp. 2 k ~ 1 ) 
M 3 = 2^=1 (resp. 2 " 1 -" 



3 y^f. 3 , • 

Proof. Assume P a (x ) = for some x G GF(2 fe ). Now we substitute x in 
P a (x) with x + x to get 

(x + x f +1 + [x + x ) + a = 
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or 

„2'+l , „ J2. 1 I i „,2'+l 



x + + x x +x x + x + x + xo + a = 
which implies 

x 2 ' +1 + x x 2i + (Xq + l)x = . 

Since a; = corresponds to xo being the zero of P a (x), we can divide the 
latter equation by x. Further, after substituting y = x -1 we note that P a {x) 
has % zeros if and only if the reciprocal equation, given by 

(xjf + 1)/ + x Q y + 1 = (18) 

has i — 1 zeros. This affine equation has either zero roots in GF(2 fc ) or the 
same number of roots as its homogeneous part (x 2 , + l)y 2 + xoy which is 
seen to have exactly two solutions, the zero solution and a unique nonzero 
solution, since gcd(2' — l,2 fc — 1) = 1. Therefore, it can be concluded that 
P a (x) = can have either zero, one, or three solutions in GF(2 fc ). 

Now we need to find the conditions when there exists a solution of (lisp . 
Let y = tw, where t 2 ' -1 = c and c = £° . Since gcd(2 ; — 1, 2 k — 1) = 1, there 

is a one-to-one correspondence between t and c. Then ( fl8l) is equivalent to 

W + W + 



ct(x 2 l + 1) 

Hence, ffTSl) has no solutions if and only if 

Tr, 



ct(x 2 l + 1) 

This easily follows from the fact that the linear operator L{u) = uo 21 + u on 
GF(2 fc ) has the kernel of dimension one and, thus, the number of elements 
in the image of L is 2 k ~ 1 . For any uj G GF(2 fe ), we have Tt^uj 2 + uo) = 
leading to the conclusion that the image of L contains all the elements in 
GF(2 fc ) having trace zero since the total number of such elements in GF(2 fc ) 
is exactly 2 fc_1 . 

Since c = t 2 '^ 1 then t = c 1+2 ' +221 ^ ^ 1)1 . Thus, from the definition of c 
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and t we get 

Trt ferny) = 1Yt (( £2 ^ i ) (ifVr)) 
= T rt ( ( i+x -'r<''>) . 

We conclude that P a (^) has exactly one zero in GF(2 fc ) (which is Xq) if 
and only if 

Tr k ((l + x Y n ) = l (19) 

or, equivalently, for all such a that a = Xq +1 + x with ffT9]) holding. Com- 
bining this with the result of Lemma HI we conclude that P a (x) has exactly 
one zero in GF(2 fc ) if and only if 

Trfe^a- 1 ) + 1) = 1 

(the "if part follows from the fact that R(x) is a permutation polynomial 
and seeing the value of Mi that is computed in the next paragraph). In the 
case of none or three zeros, Tr^(i?(a _1 ) + 1) = 0. The trace identities follow 
from Lemmas [3] and HI 

Now note that since e(l') = 1 + 2 l + 2 21 H — • + 2^ is invertible modulo 
2 h — 1 with the multiplicative inverse equal to 2 l — 1 then gcd(e(Z'), 2 k — 1) = 
1 and thus, x i— > (1 + x' 1 )^ 1 '^ is a one-to-one mapping of GF(2 fc )* onto 
GF(2 fc ) \ {1}. Therefore, if k is odd (resp. k is even) then the number of 
x e GF(2 fe )* satisfying (JTHJ) is equal to 2 k ~ l - 1 (resp. 2 fc_1 ) and obviously 
Xq ^ 1. This also gives the value of Mi since every x satisfying ffl9|) provides 
a unique a = Xq +1 + x G GF(2 fc )* such that P a (x) has exactly one zero. 
Now note that if a = then P a (x) = x 2 +1 + x + a has exactly two zeros 
x = {0, 1}. Thus, considering the mapping x x 2 +1 + x for x running 
through GF(2 fe ) \ {0,1} it is easy to see that Mi + 3M 3 = 2 k - 2 and, 
knowing Mi we can find M 3 . Finally, the last remaining unknown M can be 
evaluated from the obvious equation M + M 1 + M 3 = |GF(2 fc )*| = 2 k - !.□ 



17 



Note that Bluher in 0, Theorem 5.6] (see Theorem[2]below), in particular, 
found the possible number of zeros of P a (x) and calculated the corresponding 
values of Mj, in the notations of our Theorem [TJ This was also done earlier 



for odd k in ll|, Lemma 9] 



4. Zeros of P a (x) when gcd(Z, k) > 1 

In this section, we analyze the zeros in GF(2 fc ) of the polynomial P a (x) 
assuming that I, k are positive integers with I < k and gcd(/, k) — d > 1. In 
this case, let k = nd for some n > 1 and also recall our notation Ui = u 2% 
for any u G GF(2 fc ) and i — 0, . . . , n — 1. First, keep in mind the following 
result that can be obtained combining Theorems 5.6 and 6.4 in 



Theorem 2 (|5|) For any b G GF(2 fc )* ; take polynomials 

f(x)=x 2l+1 + b 2 x + b 2 and g(x)=b- 1 f(bx 2l - 1 )=b 2 'x 22l - 1 + b 2 x 2 '- 1 + b 

over GF(2 fc ) and let gcd(7, k) = d. Then exactly one of the following holds 

(i) f(x) has none or two zeros in GF(2 fc ) and g(x) has none zeros in 
GF(2 k ); 

(ii) f(x) has one zero in GF(2 fc ) ; g(x) has 2 d — 1 zeros in GF(2 fc ) and each 
rational root 5 of g{x) satisfies Tr*j ^b~ 1 5~( 2 ' +1 ^ ^ 0; 

(hi) f(x) has 2 d + 1 zeros in GF(2 fc ) ; g(x) has 2 2d — 1 zeros in GF(2 fc ) and 
each rational root 5 of g{x) satisfies Tr^ 1 <5 ^ = 0. 

Let T,i denote the number of b G GF(2 fc )* such that f(x) = has exactly i 
roots in GF(2 fc ). Then the following distribution holds for k/d odd (resp. k/d 
even) 

_ (2 fc +l)2 d - 1 / (2 fc -l)2 d - 1 s 

J-o — 2 d +i {resp. 2 d +i i ' 



T x = 2 k - d - 1 (resp. 2 k - d 

h 

1 i 2 k ~ d ~2 d 



T 2 = — — — ~ both cases) , 



^2 d +i — 2 2d -i {resp. 2 2d -i 

Note 1. Take a linearized polynomial 

■j- / \ Qt o2/ / r\r~\\ 

L a {x) = a x + x + ax . (20) 
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Note that zeros in GF(2 fc ) of L a (x) form a vector subspace over GF(2 d ) and 
thus, the number of zeros can be equal to 1, 2 d , 2 2d , . . . , 2 21 (we will see that, in 
fact, L a (x) can not have more than 2 2d zeros). Assume a ^ 0, then dividing 
L a (x) by a aix (we remove one zero x = 0) and then substituting x with 



-i 



x leads to a 1 2 x 2 



~ l + a x 2 x 2K 



+ a{ x which has the form of polynomial 
g(x) from Theorem [2] taking b = a^ 1 (note a 1-to-l correspondence between 
a and b). This leads to the corresponding f(x) = x 2 +1 + a^ 2 x + a{ 2 . Finally, 
substituting x in the latter f(x) with a$ 2 x and multiplying by a^al we get 



x 



2'+l 



+ x + Oq = P a 2 (x) . By Theorem [21 we obtain the relation between 
the number of zeros of L a (x) and P a 2(x). We also conclude that P a {x) has 
either 0, 1, 2 or 2 d + 1 zeros in GF(2 fc ) and M; = Tj for i = 0, 1, 2, 2 d + 1. 
It can be checked directly that L a (x) = for some x ^ if and only if 
P a 2(a x 2l - 1 ) = 0. 



Proposition 2 Ta&e any a G GF(2 fc )*. T/ien polynomial P a {x) has none or 
exactly two zeros in GF(2 fc ) if and only if Z n (a) ^ 0. Also if n is odd (resp. 
n is even) then 



M 
M 2 



(2 k +l)2 d - 1 

2 d +l 
(2 fc -l)(2 d ~ 1 -l) 
2 d -l 



f (2 k -l)2 d ' 1 

jesp. 2d ' +1 
[in both cases) 



Proof. Consider the equation L a (x) = a x x 2 + X\ + a x = and show that 
in our case, it has the only zero solution. Taking L a (x) = and all its 2 %l 
powers we obtain n equations 



a i+ iX i+ 2 + x i+1 + OiXi = for 



0. 



,n — 1 



where all indices are calculated modulo n. If Xi (i — 0, . . . , n — 1) are consid- 
ered as independent variables then the obtained system of n linear equations 
with n unknowns has the following matrix with the antidiagonal structure, 
assuming n > 2 



( 








O-n-2 1 







1 



1 



a \ 






a n _i 
a 1 / 



(21) 
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If n = 2 then / = d and L a (x) = x\ + (do + 01)^0- The corresponding matrix 

a ° ^~ fll ] having the determinant equal to 
a + ai 1 J & 4 

1 + + = Z 2 (a) ^ . 

Let the columns of (12T!) be numbered from 1 to n > 2. Permuting the columns 
in (1211) (reorder them as n — 1, n — 2, . . . , 1, n) we obtain a symmetric three- 
diagonal cyclic matrix Ai n containing ones on the main diagonal, with 

•Mrc(z, i + 1) = M. n {i + 1, i) = cl% for i — 1, . . . , n — 1 

and corner elements A^ n (l,n) = .M n (n, 1) = a . If x — (xi, . . . , x n _i, x ) T 
and = (0, . . . , 0) T then the system has the following matrix representation 

M n x = . (22) 

The determinant of (121]) is equal to the determinant of M. n and can be 
computed expanding the latter by minors along the last row. Doing this it 
is easy to see that 

detAl„ = A (l,n - 2) + a n _i(a n _iA (l,n - 3) + a . . .a n _ 2 ) 

+ a (a A a (2, n - 2) + a x . . . a n _ x ) 

C 2 n+1 (a) + (aoCti(a)) a 
^(a) ^ . 



(4, 
(7i 



Thus, ff22l has exactly one solution which is x = 0. Now note that every 
x G GF(2 fc ) with L a (x) = provides a solution to the system given by 
Xi = x 2 ' for i = 0, ... ,n — 1. Therefore, if Z n (a) ^ then L a (x) = has 
exactly one root (which is equal to zero) . By Note [1] and Theorem [2] (JI|) , 
P a 2{x) has either none or exactly two zeros in GF(2 fc ) and the identities for 
Mo and M 2 follow as well. Finally, note that Z n (a 2 ) = Z 2 (a) and, therefore, 
the conditions of the theorem are satisfied by any a 2 ' with % = 0, . . . , k — 1. 

Using Corollary (TJ we can obtain the number of a e GF(2 fc )* such that 
Z n (a) 7^ (note that Z n (0) = 1). Observe that this number is identical to 
T0+T2 taken from Theorem [2] that is equal to the number of a £ GF(2 fe )* such 
that P a {x) = has none or exactly two roots in GF(2 fe ) (see Noted]). There- 
fore, if P a (x) has none or exactly two roots in GF(2 fc ) then a is necessarily 
such that Z n (a) 7^ 0. □ 
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The following proposition provides a criterion to distinguish between the 
cases when P a (x) has none and when it has exactly two zeros in GF(2 fc ). 

Proposition 3 Take any a G GF(2 fc )*. Then polynomial P a (x) has exactly 
two zeros in GF(2 fc ) if and only if Z n (a) ^ and Ti d (N%(a)/Z 2 (a)) = 0. 
Moreover, if d is odd then these two zeros are (W + fi)Z n (a)/C n (a) for fi G 
{0, 1} ? where 

C n+1 (a) ^ /N|(o)^ 
Zja) tjWnia) 

Proof. First, consider equation a 2l x 2 ' +l + x + a = 0. Using the substitu- 
tion x = a~ x y and multiplying by a, the latter equation is transformed into 
P a 2 (y) = y 2 +1 + y + a 2 = having the same number of roots. Thus, by 
Proposition [2j a 2 x 2 +1 + x + a has none or exactly two zeros if and only if 
Z n (a 2 ) = Z 2 n (a) ? 0. 

We prove by induction that for any u G GF(2 fc ) being a root of this 
equation and i = 1, . . . , n holds 



uC 2 +1 (a)+a(C 2 (a)) 21 



a, (uC 2 (a) + aiCl^a))*) 

assuming C (x) = 0. For i = 1 the identity is obvious since aiu 2 +1 +u+a 
Assuming the identity holds for i < t we get for % — t > 1 

Ul (C 2 (a)) 2 ' + a^CUa)) 221 



u t = u t _ x 



(u + a)(C 2 (a)) 21 + ua 2 (C 2 _M? 21 
a t ((« + a){Cl x {a)T + ua 2 (Cl 2 (a)) 221 ) 
m uC 2 +1 (a) + a(C 2 (a)f 



a t (uC 2 (a) + 0(01,(0))*) 

using induction hypothesis and since U\ — (u + a)ja\u. 
In particular, for i = n we get 

uC 2 n+l (a) + a(C 2 n (a)f l , 
" U a{uCl(a) + a(C 2 n ^(o)r) 

aC 2 (a)u 2 + (c n+ i(a) + aC^'_ 1 (o)^ u ^ aC 2 (a)u 2 + Z 2 (a)u = a (C 2 t (a)) 
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Note that the latter equation is a trivial identity when C n (a) = 0, i.e., when 
P a (y) has more than two zeros (see Proposition Now use the substitu- 
tion u = v Z 2 (a) I aC 2 (a) to obtain v 2 + v = (aC^ ' +1 (a) / Z 2 (a)^j (obviously, 
C n (a) 7^ when Z n (a) ^ 0). Observe that 

aCt + \a) § aCti{a)Cn+i{a) N*(o) § C n+l (a) C 2 n+1 (a) N|(o) 

and thus, Tr fc (aC 2i+1 (a)/^(a)) = nTr d (N k d (a) / Z 2 (a)) since Z n (a) G GF(2 d ). 

Therefore, if n is odd and a 2l x 2 ' +1 + x + a = has exactly two roots in GF(2 fc ) 
then Z n (a) ^ and Tr d (N k d (a) / Z 2 n (a)) = 0. 

For the case when n is even, some additional arguments are needed. Note 
that 



N*(a)^ 



v + 




and 



Z 2 (a) 

C 2 n+1 (a)\ 2 ' ( aCi+\a)X , (C 2 n (a) f + {C 2 n+l {a)) 21 



Z 2 (a) J \ Z 2 (a 

§ v ]1{ a 2 (^-i(a)) 2 ' Q v , C^.i(a) 
Z 2 (a) Z 2 (a) 

since a 2! « 2 ' +1 + u + a = and using the relation between w and v. Thus, 

v + G GF ( 2 ") and Trrf ( N d( a )/ Z ») = °- 

Now prove the converse implication. Take an arbitrary n and assume 
Z n (a) and Tr d (N%(a)/Z 2 (a)) = 0. Since Tr fc (aC 2l+1 (a)/Z 2 (a)} = 

there exists some v G GF(2 fc ) with t> 2 + t> = ^a(7 2 ' +1 (a)/Z 2 (a) j . Using 

the substitution u = vZ 2 (a)/aC 2 (a) we also obtain aC 2 (a)u 2 + Z 2 (a)u = 
a(C 2 (a)) 2 . It is easy to see that 

i l 

v + v = 




m C 2 n+1 (a) {C 2 ; +1 {a)f I fN*(a) 
H x r - lr d 



Z 2 (a) Z 2 (a) d \ z n(«) 

gm (C 2i (a) + Z n (a)) 2 (C 2 '(a)) 2 



Z 2 n (a) Z 2 (a) 
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+ 1 . 



Note that n and l/d can not be even together. Using the substitution u = 
vZ 2 (a)/aC 2 (a) we obtain 

{aC 2 n (a)f u 2 ' + aC 2 n (a)u = (c^ (a))* + Z 2 n (a) and 
(aC 2 n (a)fu 2l+1 + Z 2 n (a)u + a(C 2 n (a)f = u ((c? (a))' + i£(a)) 

which gives a 2i « 2 ' +1 + w = a. Thus, P a (^) has a zero and, by Proposition [21 
it has exactly two zeros. 

Finally, note that the solution in GF(2 d ) of the equation x 2 + x = u for 

d-l 

some u G GF(2 d ) with Tr d (w) = and odd d can be written as ^1=0 u2 * or 

£2 u 22l+ \ This way we obtain v = W 2 +n thus, u = {W 2 +p)Zl(a)/aC 2 n (a) 
and P a 2((W 2 + fj,)Z 2 (a)/C 2 (a)) = for fi £ {0, 1}. It is also not difficult 
to check by the direct calculations that P a ((W + fi)Z n (a)/C n (a)) = if 
Tr d (N k d (a)/Zl(a)) = 0. □ 

In the case when d = 1, if Z n (a) 7^ (i.e., Z n (a) = 1) then Tr d (N^(a) / Z 2 (a)) = 
only for a = and thus, P n (x) has two zeros in GF(2 fc ) only for a = 0. The 
next proposition follows from Propositions [2] and [51 We provide this proof 
yet, independently of previous statements, since its major part contains the 
result needed for proving the fact from Corollary [H and for the sake of giving 
the complete picture of the addressed problem. 

Proposition 4 Take any a G GF(2 fc )*. Then polynomial P a (x) has exactly 
one zero in GF(2 fc ) if and only if Z n (a) = and C n (a) 7^ 0. Moreover, this 

zero is equal to laC 2 1 (a) j and if n is odd (resp. n is even) then 

M 1 = 2 k - d - 1 (resp. 2 k ~ d ) . 

Proof. Note that without loss of generality, we can substitute a with a 2 in 
the claimed result. First, assume Z n (a) = and C n (a) 7^ (equivalently, we 
can take a 2 ). Now we find the number of zeros of L a (x) in GF(2 fc ). Note 
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that 



L a {C n {a)) = a x C 2 n (a) + C 2 n (a) + a C n (a 



aiC n _ 1 (a) + aia C n _ 2 (a) + C n (a) + a C„(a) 
C„+i(a) + a Q Cl_ x {a) 



S ^(a) = . 

Therefore, if C n (a) ^ then 2 d distinct elements /iC n (a) G GF(2 fc ) for G 
GF(2 d ) are also zeros of L a (x) (since GF(2 fc ) f| GF(2') = GF(2 d )). 

It is not difficult to see that in our case, L a (x) can not have more than 
2 d zeros in GF(2 fc ). Indeed, consider matrix A4 n of the system of n linear 
equations ( |22i) . Note that det M. n = Z 2 (a) = and a principal submatrix 
obtained by deleting the last column and the last row from M. n is nonsin- 
gular with the determinant A a (l,n — 2) = C 2 (a) ^ (see (fT2l ). Therefore, 
applying equivalent row transformations to Ai n we can obtain a matrix con- 
taining a nonsingular diagonal submatrix lying in the first n — 1 columns 
and rows. Thus, the equation given by one of the first n — 1 rows (take row 
i G {1, . . . , n — 1} with il = d (mod fc)) of this equivalent matrix is nonzero 
and has degree 2 d . We conclude that system (1221) can not have more than 2 d 
solutions and the same holds for the equation L a (x) = 0. Note that on the 
side, we have found a factor x 2 + C 2 ~ 1 (a)x of L a (x) that contains all its 
zeros in GF(2 fe ). 

By Note [1] and Theorem [2] (Jn|), P a 2(x) has exactly one zero in GF(2 fc ) 
that is equal to a(fiC n (a)) 2 _1 = aC^ _1 (a) and the identities for Mi follow 
as well. 

Now we prove the converse implication. Assume P a 2{x) has exactly one 
zero in GF(2 fc ). Here we use the technique found by Bluher [5j for counting 
the number of b G GF(2 fc )* for which fb{y) = y 2 +1 + by + b has exactly one 
zero in GF(2 fc ). For any v G S with 5* coming from fflUj) define r = v 1-2 +1 G 

l k ) 

zero of fb(y)- Note that 



GF(2 fe ) \ {0, 1} and corresponding b = ^ 0. Obviously, such an r is a 



r 2+1 i i , f?; + ?; 2 F +1 

6 = T — = V-* + D 2 ' +1 = "^i = , (24) 

where V comes from (jSj). Then, by Proposition [1] and CorollarylU, C n (6 _1 ) 7^ 
and Z n (b~ v ) = 0. By the implication already proved, Pb-i(x) has exactly 
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one zero in GF(2 fc ). After substituting x in the latter polynomial with 

we get polynomial f b2 i (y) having the same number of zeros as P b -i (x). Thus, 

fb(y) (as well as f b2 i(y)) has exactly one zero in GF(2 fc ). 

Now we prove that function (1241) that maps every v G S to b G GF(2 fc )* is a 
(2 d — l)-to-l mapping. First, note that (2 l — l)-power is a (2 d — l)-to-l mapping 
of S to GF(2 fc )*. Indeed, if x G S and x 2l ~ l = t then the latter identity holds 
for all distinct 5x G S with 5 G GF(2 d )* since Tr k d (5x) = STr k d (x) ^ and 
Sx ^ GF(2 d ). Thus, every r = t> 1-2 + 1 is obtained from 2 d — 1 different 
values of t> . Finally, the mapping from r to b is 1-to-l since for the obtained 
b the equation fb(y) = has exactly one root r. 

Therefore, taking all v G S and using (1241) . we obtain |5'|/(2 d — 1) different 
values of 6 G GF(2 fc )* and this number is equal to the total number of b such 
that fb{y) has exactly one zero (see Theorem [2]). Therefore, these and only 
these values of b satisfying (1241) result in the polynomials fb(y) having exactly 
one zero. 

After substituting x in P a 2(x) with a 2 y, we get polynomial fb{y) with b = 
a -2 l+1 laying t ne same number of zeros as P a a(a;). If polynomial P a 2(x) has 
exactly one zero then f b {y) also has exactly one zero and, thus, b is obtained 
by flMD- Therefore, by Proposition QJ C^fr" 1 ) = C n (a 2 ' +1 ) = C n (a 2 ) 2 ' ^ 
and, thus, C n (a 2 ) ^ 0. Also, by Corollary HJ Z n (a 2 ) =0. □ 

Note that if Z n (a) = and C n (a) 7^ then, by Proposition [TJ and Corol- 
lary [H a has the form of © for some v G GF(2 fc ) \ GF(2 d ) with Tr^(f) ^ 
and 

aC^\a) = T*)W^)V 2 ' +1 so 

^ (a-^-^Ca)) = N* (l + ^) % . 

This complies with the trace property from Theorem [2] (Jn|). Indeed, take 
b = aj 1 and 5 = //aC n (a) for any // G GF(2 d )* then = L 2 ^ n(a }\ = and 

Now we are left with the remaining case when C n (a) = (then, by Corol- 
lary [H Z n (a) = 0). The next proposition follows from Propositions [2] and 
HI We provide this proof yet, independently of previous statements, since its 
major part contains the result used for proving the converse implication and 
also needed for proving the fact from Proposition HJ It is also worth mention- 
ing [2], Lemma 22], where the authors found an interesting parametrization 
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for the set containing all 2 d + 1 zeros of x 2 ' +1 + ax 2 ' + bx + c in GF(2 fc ). The 
latter polynomial is directly related to P a ( noted in the introduction. 

Proposition 5 Take any a G GF(2 fc )*. Then polynomial P a (x) has exactly 
2 d + 1 zeros in GF(2 k ) if and only if C n (a) = 0. Also if n is odd (resp. n is 
even) then 

M 2 d +1 = 2 2d_! ( TeS P- 2 2d_ l ) • 

Proof. Here we use the technique found by Bluher j5| for counting the 
number of b G GF(2 fc )* for which fb(y) = y 2 +1 + by + b has 2 d + 1 zeros in 
GF(2 fc ). Denote G = GF(2 fe ) \ GF(2 2d ) and observe that 

2l\ _ nT?( 9 dgcd(n,2)\ r n -p( 9 2d\ 



GF(2 fe ) n GF(2 2 ') = GF(2 dgcd(n ' 2) ) C GF(2 



Therefore, taking any u G GF(2 fc ) such that u GF(2 M ) implies u 2 ^ u 
and {u+u 2 ) 2 ^ u + u 2 or, equivalently, u + u 2 ^ GF(2') which is the same as 
u + u 2 ' i GF(2 d ). Now we can define r=(u + u 2 ') 1 - 2 ' + 1 G GF(2 fc ) \ {0, 1} 

and corresponding b = ^ 0. Obviously, such an r is a zero of fb(y)- 

Define also r = ra 2 '" 1 and r\ = r(u + l) 2 '" 1 and note that r, r and r\ are 
pairwise distinct. Further, 

/ 6 (r ) = r 2i+1 M 22 ' -1 + fora 2 ' -1 + 6 = 6((r + 1)m 22 ' + ru 2 ' +u)/u = 

since r(w + u 2 ') 2 ' = w + u 2,2 ' by the definition of r. Also, similarly, we get 

, , . b((r + l)(u+ l) 22 ' +r(u + l) 2 ' + (u + 1)) 6(r + 1 + r + 1) n 

M r i = — i = = • 

u + 1 it + 1 

Thus, fb(y) with such a 6 has at least three zeros and, by Theorem [21 it has 
2 d + 1 zeros. Note that 

b= r —r = (u+u 2i f-\(u + u 2i r 2l +if +1 = rl M 2 ,l + i = v " ' ( 25 ) 

r + 1 (w + ) 2 +i 

where V comes from (jSJ) assuming v = u + u 2 ' . 

Now we prove that function fl25l) that maps every it G G to b G GF(2 fc )* is 
a (2 3d — 2 d )-to-l mapping. First, note that u + u 2 is a 2 d -to-l mapping 
onto 

F = {x G GF(2 fc ) \ GF(2 d ) | Tr^(x) = 0} 
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(see explanations in the proof of Proposition [TJ. Further, (2 l — l)-power is 
a (2 d — l)-to-l mapping of F to GF(2 fc )*. Indeed, if x G F and x 2 '^ 1 = t 
then the latter identity holds for all distinct 5x G F with 5 G GF(2 d )* since 
Tr k d (5x) = 5Tr k d (x) = and 5x £ GF(2 d ). Thus, every r = (u + u 2 ') 1 - 2 ' + 1 
is obtained from 2 d (2 d — 1) different values of u. Finally, the mapping from 
r to b is {2 d + l)-to-l since for the obtained b the equation fb(y) = has 
(2 d + 1) roots and every root r satisfies (r + G F 2 ~ l . Indeed, let r, r 
and T\ be any distinct zeros of fb(y) (not necessarily the ones defined above) 
and define u = (r + tx)/{tq + r\). Note that 

rr (r + r ) 2 ' = r r 2 ' +1 + rr^' +1 = r 6(r + 1) + rb(r + 1) = b(r + r ) 

and so b = rr (r + r ) 2 ' -1 = rri(r + ri) 2 '^ 1 = r ri(r Q + ri) 2 -1 . Then 
^-i = (ro/r) ^+i =(ro + 1)/(r+1) _^ 1 

and, thus, u e G. The identity (r + 1)^ 1 = (m + u 2 ') 2 ' -1 G F 2 ' -1 follows from 
ji], Lemma 2.1]. 

Therefore, taking all n G G and using fl2SJ), we obtain |G|/(2 3d — 2 d ) 
different values of b G GF(2 fc )* and this number is equal to the total number 
of b such that fb(y) has 2 d + 1 zeros (see Theorem [2]). Therefore, these and 
only these values of b satisfying (I25j) result in the polynomials fb(y) having 
2 d + 1 zeros. 

Now note that without loss of generality, we can put a 2 in place of a in 
the result we are claiming. Then, after substituting x in P a 2(x) with a 2 y, 
we get polynomial fb(y) with b = a~ 2 + having the same number of zeros as 
P a 2(x). In particular, polynomial P a ^{x) has exactly 2 d + 1 zeros in GF(2 fc ) 
if and only if the same holds for the corresponding polynomial fb(y) and this 
is equivalent to b having the form of (125]) . It remains to apply Proposition [TJ 
and note that C n (6 _1 ) = C n (a 2 ' +1 ) = C 2 '(a 2 ) and the latter is equal to zero 
if and only if C n (a 2 ) = 0. The identities for M 2 d +1 follow from Note [TJ and 
Theorem [2] (lull) . □ 

Note that if Z n (a) = then, by Corollary [TJ, a has the form of (jHJ) for some 
v G GF(2 fc )\GF(2 (i ) and it is straightforward to check that P a (v/(v + v 2 ')^ = 
0. This also complies with Proposition H] since if, additionally, C n (a) ^ 

then, by [aC 2 x (a) J = v/(v + v 2 ). The following corollary follows 
by combining Theorem [T] and Proposition [H 



27 



Corollary 4 Take any a G GF(2 fc )* and positive integer I < k withgcd(l, k) = 
1. Then Trfc(i2(a _1 ) + 1) = 1 if and only if Z^[a) = and Cfc(a) ^ 0, where 
R(x), Ck(x) and Zk(x) are defined in (TJj], and |?|) respectively. 

5. Related Affine Polynomial 

In this section, we consider zeros in GF(2 fc ) of the affine polynomial F a (x) 
defined in (CQ). Obviously, either F a (x) has no zeros in GF(2 fc ) or it has exactly 
the same number of zeros as its linearized homogeneous part L a (x) defined 
in (I20I) . It was shown in Note [1] that L a (x)/x and polynomial g(x) from 
Theorem [2] are related by a one-to-one substitution of variable. On the other 
hand, P a (x) and polynomial f(x) from the same theorem are related in a 
similar way. Thus, we can use Theorem [2] and the results from the previous 
sections to analyze the number of zeros of F a (x) if we show that is has at least 
one zero in GF(2 fc ). Moreover, since L a (cv) = cL a (v) for any v G GF(2 fc ) 
and c G GF(2 d ), where d = gcd(7, k), we can equivalently assume 

F a {x) = a x + x + ax + c . 

We know already from Lemma [2] that if d — 1 and a^O then ci?(a _1 ), where 
R(x) comes from (T5]), is a zero of F a (x). Recall the notation n = k/d and let 
also 

N { = {a\ae GF(2 fc )* and F a (x) has exactly i zeros in GF(2 fc )} . 

Lemma 5 Take any a G GF(2 fc )* and assume F a (x) has a zero in GF(2 fc ), 
say F a (V) = 0. Then for any v G GF(2 fc ) with F a (v) = holds 

T*) = Tr*(V)G{0,c} 

Moreover, if d = 1 then 

Tr k (av 2 ' +1 ) = /'Tr fc ( J R(a- 1 )) + Tr,(/' + l), 
= /'Tr fe ( J R(a- 1 )) + Tr fe (/'), 

where R(x) is defined in ID) and I' = l^ 1 (mod k). 

PROOF. The first identity follows by observing that any zero of F a (x) is 
obtained as a sum of V and a zero of its homogeneous part L a (x). To prove 



if v = R(a- 1 ) 
if R(a- 1 ) , 
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the identity it therefore suffices to show that Tr^(w) = for any u with 
a 2 u 2 + u 2 + au = 0. This follows from 

Tr k d (u) 2 = Ti k (u 2 ) = Ti k d (u 2 ' +1 ) = Ti k d (u 2l+2 ') = Ti k d (a 2l u 22l+2 ' + au 2l+1 ) = 
and thus, Tr^(u) = as claimed. Also similarly, we get 
Tr^(V) 2 = Tr^(V 2i+2i ) = Tr k (a 2 'v 22l+2 ' +aV 2 ' +1 +cV 2 ') = Tr k (cV 2 ') = cTr k (V) 

which holds if and only if Tr^(V) G {0, c}. 

Now assume gcd(7, k) — 1 and let V = i?(a _1 ) which, by Lemma [21 is 
a zero of F a (x) in GF(2 fc ). To prove the second identity for the case when 
v = V, we use the fact presented in the proof of Lemma [2] that aV 2 +1 = 
Dili V 2U + V + 1. Then Tr fc (aV 2i+1 ) = /'Tr fc (V) + Tr fc (/' + 1). 

Now note that since F a (v) is obtained by adding the 2'th power of (fl4j) 
to itself we have for v ^ 

V 

F a {v) = if and only if at/ +1 + ^ v 2 " + I' + 1 G {0, 1} . 

i=l 

Since V is the only solution of (1141) . then for ?; ^ V with -F a (t> ) = we have 
^ 2 ' +1 + Ef=i ^ + /' + 1 = 1 and 

Tr fc (c«/ +1 ) = ^Tr^) + Tr fc (/') = l'Tr k {V) + Tr k (l') 

using already proved identity that Trf.(v) = Trfc(V). □ 

Proposition 6 Take any a G GF(2 fc ). Then polynomial F a (x) has exactly 
one zero in GF(2 fc ) if and only if Z n (a) ^ 0. Moreover, this zero is equal to 
V a = cC n (a) I Z n (a) and Tr^(V a ) = nc. Also if n is odd (resp. n is even) then 

Q^k+2d ^k+d 2& _|_ 2^+2^ c^k+d ^k <^2d _|_ ^d _|_ j 

l^i I = (resp. ) . 

2 2d - 1 v 2 2d - 1 ; 

Proof. Having Theorem [2] and Proposition [21 it suffices to show that V a 
indeed is a zero of F a (x) if Z n (a) ^ 0. First, recall that Z n {u) G GF(2 d ) for 
any u G GF(2 fc ). Therefore, 

FaiVa) = -^ r -(a 1 Cl 2 \a) + C 2 r !(a) + a C n (a) + Z n (a)) (26) 



aiC^i(a) + aia C 2 ^ 2 ( a ) + Cn'( a ) + a oC n (a) + Z n (a) 



Z n (a) 



J5j c 



fc n+ i(a) + a C 2i _i( a ) + Z n {a) \ =0 . 
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To prove the trace identity for V a first note that for any u G GF(2 fc ) 

Tr k d (C n (u) + Z n (u)) Tr k d (c n (u) + C n+1 (u) + u C*_i(u)) 

§ Tr* (C n {u) + C n {u) + u n ^C n ^(u) + u C*_i(uj) 
= Ti k d (u n „ x C n „ x {u) + (u n ^C n ^(u) f) = . 

Therefore, since c and Z n (a) are both in GF(2 d ), then 

Tr*(V a ) = Tr* (c + c ^^"^ ) = nc+^ Tr k d (C n (a)+Z n (a)) = nc . 

Finally, |iVi| = Tq + T2 taken from Theorem El □ 

Note that if Z n (a) 7^ then, by Theorem [2] and Proposition [21 the linear 
operator L a (x) on GF(2 fc ) has the kernel of dimension zero and, thus, the 
number of elements in the image of L a is 2 k . Thus, the equation L a (x) = c 
has a solution for any c G GF(2 fc ) if Z n (a) 7^ 0. Also note that if d = 1, a ^ 
and Zk{a) 7^ 0, i.e., Z^{d) = 1, then, by Lemma El -R(a _1 ) = Ck(a). 

Proposition 7 Take any a G GF(2 fe )*. Then polynomial F a (x) has exactly 
2 d zeros in GF(2 fe ) if and only if Z n (a) = and C n (a) 7^ 0. In this case, 

Tr^(f) = (n — l)c and, if n is even, then Tr& (^ac~ 2 v 2l+1 ^j is constant for any 
v G GF(2 fe ) with F a {y) = 0. Moreover, if n is odd then these zeros are 

n-l 

— r ,2^ i + 1 ) l ( n \ 

E °n-1 \ a ) \ . n ( \ 

( -<2(2»+l)i+22«-lC a ^ +/ iU "l a J 
i=0 n ' 

for every fi G GF(2 d ) and 

(-i)^( w+1 )=o . 

AteGF(2 d ) 

Also if n is odd (resp. n is even) then \N 2 d\ = 2 k ~ d — 1 (resp. 2 d ). 
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Proof. Having Theorem [2] and Proposition HJ it suffices to show that F a (x) 
has at least one zero in GF(2 fc ) if Z n (a) = and C n (a) ^ 0. From now on 
assume Z n (a) = 0, C n (a) ^ 0. Note that in this case, by fl26|) . 

ai Cf (a) + Ct (a) + a C n (a) = (27) 

which means that all 2 d distinct elements /jC n (a) e GF(2 fc ) for y, e GF(2 d ) 
are zeros of L a (x), since GF(2 fc ) f| GF(2') = GF(2 d ). 
Consider the following equation over GF(2 fc ) 

C n (a)x 2 ' + C*(a)x = cC*_ x (a) . (28) 
Substituting x = C n (a)y we obtain 

2' , .. cC n~l( a ) 



y +y 



which has a solution since, by Corollary [2} Tr^ y ^^+i^ J = (if n > 2) and 

c G GF(2 d ) (see explanations in the proof of Proposition [1]). 
Therefore, there exists some u G GF(2 fc ) with 

C n (a)ui + C 2 (a)u = cC^_ 1 (a) and 
Ct{a)u 2 + Cf{a)u x = cCj^a) , 

where the second identity is obtained by raising the first one to the power 
of 2 l . Now, multiply the first identity by a C~ 2 (a), the second by a\C~ 2 (a) 
and add them to obtain 

a x u 2 + C~ 2 '(a) (a C n (a) + aiC^' ''(a) J Ui + a u 

= aiu 2 + Ui + a u 
= cC- 2 \a) (aoC^ia) + aiC^a)) 

^cCfia) (a cUa) + cUa)) m 
Thus, F a (u) = 0. 



c . 
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If Z n (a) = and C n (a) ^ then, by Proposition [T] and Corollary [fl 
a = vf +1 /(v + v{) 2l+1 for some v G GF(2 fc ) \ GF(2 d ) with Tr k d (v ) ^ 0. If 
u G GF(2 fc ) is a solution of (TJHD then F a (u) = and, by ©, 

^2 ^2 H hf„ 

Ml H Mo = C r . 

Ui + v 2 v + V\ Tr^(-y ) 
Taking the trace of the both sides, we get 

Tr^ ( ~^u + ~^u ) = Tr k d (u) = (n - l)c . 
V^o + ^i v + v 1 J 

By Lemma [5], all zeros of F a (x) have the same trace in GF(2 d ). 

To prove the properties of Tr fc (ac~ 2 v 2 ' +1 ^j , where F a {v) = 0, we use the 

technique suggested by Dobbertin for proving 0, Theorem 1] (we did this 
already in the proof of Lemma H]). Assume c = 1. If F a (x) has 2 d zeros 
then, by Theorem [2], P a (x) has exactly one zero, say Xq G GF(2 fc ) with 
Xq +1 + xq = a. Define polynomial Q(x) = ax 2 ' + x\x + xq and denote 
T = Xq _1 + Xq 1 (obviously r ^ since xq 1). As in Lemma HI we can 
write F a (x) = Q(x) (q(x) 2 '- 1 + Tj. 

Since P a (xo) = and xq is the only zero of P a (x), polynomial 

P a (x + Xq) — (x + X ) 2l+1 + (x + Xq) + a = X 2 ' +1 + X X 2 ' + Xq X + X 

has none zeros in GF(2 fc )*. Multiplying the latter polynomial by Xq/x, we 
obtain that xqx 2 + x\x 2 _1 + a has none zeros in GF(2 fc ) and the same can 
be said about its reciprocal that is equal to Q(x). Thus, all 2 d zeros of F a (x) 
are exactly zeros of Q(x) 2 _1 + T and there exists a unique A G GF(2 fc )* with 
A 2 ; -i = r -i guch that _ A -i hag 2 d so l u tions in GF(2 fc ) (note that 

Q(x) + b has none, one or 2 d zeros depending on b G GF(2 fc )). Also, 
0(A) + *o = A (aA 2 " 1 + x 2 ) = A ( X j + l + X \ +x 2 )=0 

v i \xi ^xq 1 y 

and, therefore, taking a particular solution v of Q(x) = A -1 , all the solutions 
are = v+fiA for every « G GF(2 d ) (these are exactly the zeros of F a (x)). 
Now, using Q(v^) = A -1 , we obtain 

Tr fc (av 2l+l + cw 2 ' +1 J = Tr fc (xqM 2 + x f + A _1 t; + Xgf 2 + x ^ + A _1 t> M ) 

= Tr fc (xq« 2 A 2 + x /iA + «) = nTr d (^) 
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and if n is odd then 



(-i) T H a ^ +1 J = (_i) T ^K +1 ) J2 (-1)^ = 0. 

AtGGF(2 d ) /ieGF(2 d ) 

This sum can also be calculated directly (see 0, Appendix B]). The case 
when n is even comes obviously. If c ^ 1, we need to multiply all zeros of 
F a (x) by c _1 to obtain zeros of F a (x) with c = 1. Since c G GF(2 d ) and 
c 2 +1 = c 2 , we have the additional coefficient c~ 2 in the trace formulas. 

Finally, note that the solution in GF(2 fc ) of the equation y 2 + y = u for 
some u G GF(2 fe ) with Tr d (-u) = and odd n can be written in two ways as 

71 — 1 _ 71 — 3 , , 

Eiio « ° r Eiio « since Tr^(u) = Tr^(u) if u G GF(2 fc ). It can also 
be calculated directly that if n is odd then F a {Vfj) = and Tr^(t> M ) = (see 
j3, Appendix A]). The identities for |i\r 2 <»| follow from Theorem [2J □ 

Proposition 8 Take any a G GF(2 fc ). Then polynomial F a (x) has at least 
one zero in GF(2 fc ). Moreover, if F a (x) has exactly 2 2d zeros then Tr*j(t>) = nc 
for any v G GF(2 fe ) with F a (v) = and, if n is odd, then 

s Tr h (ac- 2 v 2l + l ) _ nd 



j2 (-l^r v + ) = 2° 

v£GF(2 k ),F a (v)=0 



Also if n is odd (resp. n is even) then 



c^k—d i ^k—d 



\N 2 2d\ = — (resp 



2 2d_ 1 22d _ 1 

Proof. Since the statement is obvious for c = 0, we take c ^ 0. As noted 
above, without loss of generality, we can also assume c = 1. Now, select any 
u G GF(2 fc ) with Tr^(w) = 1 and fix it. Since Tr k d ((w + w 2 ) 2 ') = 0, there 

exists some w G GF(2 fc ) such that w + w 21 = (u + w 2 ) 2 ' (see explanations in 
the proof of Proposition [T]). Fix some w with this property as well. 

For any pair (a, v) G GF(2 fc ) x GF(2 fc ) with F a (v) = and v ^ u, assuming 

we have 



a z v 2 +2 +w 2 , , 2 i av 2+1 +w 



F b (v + u) = , + {v + uY + — — — r + l 

(v + uy [v + uy 



(v + u) 



1 ( 2 l f 2 l 2 2t i 2 l i i i\ i i 2 l i / i 2\2 ! A 

— —r [v (a v +v +av + l) + w + w + (u + u ) 
-uY V / 
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By Lemma 0, we obtain a 1-to-l correspondence between two sets 

5 = {( a ,v) | v ^ u,F a {v) = 0,Tr^(t>) = 0} and 

5 1 = {(a,v)\v^u,F a (v)=0,Tr h d (v) = l} 

defined by (a,v) h- > (b, v + u) and thus, | *So | = \S\\. Note that for n odd we 
can take u = 1 and w = 0. 

Consider equation F x (u) = x 2 u 2 + xu + u 2 + 1 = of the unknown 
x G GF(2 fc ). After substituting x = (uu 2 )~ l y we obtain equivalent equation 

y 2,1 +y = (u + u 2 ) 2,1 which has a solution in GF(2 fc ) since Tr^ Uu + u 2 ) 2 '^ = 0. 

Thus, F x {u) = has exactly 2 d roots in GF(2 fe ) since its linearized homoge- 
neous part x 2 u 2 +xu has 2 d zeros which are fiu^^ 2 +1 > for every u G GF(2 d ). 

Now, since i^(^) can have 0, 1, 2 d or 2 2d zeros, using Propositions [6] and 
[7] and Lemma we can compute the following sum in two different ways 

(-l)^M = |5 | - |5 X | - 2 d 

(o,t)):J'„(«)=0 

= (_l)TrS(D + ^ (_!)^5(V.) + (-±) Trkd(V) + X 

aeNx aeN 2d v. F a {v)=0 

= (-l) n (1 + |JVi| - 2 d \N 2d \) + X = -2 d , 

where X = YlaeN 22d Y^v.F a (v)=o(~ 1 ) Trd ^ ■ Thus, if n is odd (resp. n is even) 

then X = — 2 ^zt~ ~ (resp. 2 % d _i 2 - ) (note that = > 2d if n is 
even) . Observe that the calculated values of X satisfy 

X = (-l) n 2 M (|GF(2 fc )*| - |iVi| - |iV 2d |) 

which, by Lemma [5], holds if and only only if Ti d ( t>) — n and |A^22d| — ^2 2d — l 
(resp. 2 ' oidZx ) f° r an Y v ^ GF(2 fc ) with F a (v) = and a G N 2 2d if n is 
odd (resp. n is even). Since |iVx| + \N 2d \ + \N 22d \ = |GF(2 fc )*| and F (x) 
has a unique zero x — 1, polynomial F a (x) has at least one zero in GF(2 fc ) 
for any a G GF(2 fc ). Finally, note that zeros of F a (x) with an arbitrary 
c G GF(2 d ) are exactly the elements cv obtained from every v G GF(2 fc ) 
satisfying F a (v) = with c = 1 (obviously, Tr^(cu) = nc). 

Now assume n is odd and c = 1. To prove the properties of Tr^ (ac~ 2 v 2 ' +1 ~\ 

where F a (v) = 0, we proceed similarly to what we did in the proof of Propo- 
sition [7J If F a (x) has 2 2d zeros then, by Theorem [21 P a (x) has 2 d + l zeros and 
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we take one of them, namely, Xq £ GF(2 fc ) with Xq +1 +Xq = a. Define polyno- 
mial Q(x) = ax 21 +XqX+x and denote r = x\ _1 -|-Xq 1 (obviously r ^ since 
xo 7^ 1). As in Proposition [TJ we can write F a {x) = Q{x) (^Q(x) 21 ^ 1 + rj. 
Since P a {xo) = and Xq is one of 2 d + 1 zeros of P a {x), polynomial 

P a (x + x ) = (x + x ) 2 ' +1 + (x + x ) + a = x 2 ' +1 + x x 2 ' + x\x + x 

has 2 d zeros in GF(2 fc )*. Multiplying the latter polynomial by Xq/x, we 
obtain that XqX 2 + x\x 2 _1 + a has 2 d zeros in GF(2 fc ) and the same can be 
said about its reciprocal that is equal to Q(x). Thus, 2 d zeros of F a (x) are 
also zeros of Q(x) and the remaining 2 d (2 d — 1) zeros of F a (x) are also zeros 
of Q(x) 21 - 1 + r. We conclude that for every A e GF(2 fc )* with A 2 " 1 = T" 1 
(there are 2 d — l of such A) we can find 2 d solutions of Q(x) = A -1 in GF(2 fc ) 
(note that Q(x) + b has none, one or 2 d zeros depending on b £ GF(2 fc )). 

For any v £ GF(2 fe ) with Q(v) = we have Tr^ (^av 2,1+1 \ = Tr^ (x^v 2 + Xqv) = 

0. Exactly in the same way as in Proposition [3 we obtain that for odd n, 

(-i) Trfe K +1 ) = o 

?;eGF(2 fe ),Q(i>)=A- 1 

for any A £ GF(2 fc )* with A 2 ' -1 = T -1 . In the general case when c / 1 we 
need to multiply additionally the trace expression by c~ 2 . □ 

Therefore, it can be concluded that polynomial F a (x) has exactly 2 2d 
zeros in GF(2 fc ) if and only if C n (a) = 0. 



6. Related Linearized Polynomial 

In this section, we consider zeros in GF(2 2fc ) of the linearized polynomial 

Q a {x) = r 2 W 2! + x 2 " +l + rax , (29) 

where / < k, a £ GF(2 fc )* and r £ GF(2 2k )* with r 2 " +1 = 1. For the 
details on linearized polynomials in general, the reader is referred to Lidl 
and Niederreiter [jjj]. It is clear that Q a (x) does not have multiple roots if 
a ^ and that Q a (x) always has at least one zero x — 0. 

Denote d = gcd(Z, k), n = k/d and d\ = gcd(/c + I, 2k). Observe that 

, , I -\ \2 k+l 2 2 ( fe +'' , 2 k+l , 

Qa{x) = (r a) x +x + rax 
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and in this form, polynomial Q a {x) reminds L a (x) defined in (1201) . For any 
u G GF(2 fc ) denote Ui = u 2 ' and let = r 2 ' for i = 0, . . . , n — 1 so Q a {%) = 
ridix 2,21 + x 2k+l + r a x. Note that r 2 ™' = r 2 " d = r^ -1 ^ d . Dividing Q a (x) 
by r aoa\x (we remove one zero x = 0) and using the substitution y = 
(ra)~ 1 x 2 + ~ 1 we obtain 

f(y)=y 2k+l+1 + afy + af , (30) 

the polynomial that appeared in Theorem [2j Note that multiplying f(y) 
by a^a 2 and using the substitution z = a 2 y we obtain z 2k+ ' +1 + z + a 2 , the 
polynomial having the same number of zeros as f(y) and that can be analyzed 
using the results from Sections [3] and HI 

Lemma 6 Take any r G GF(2 2fc )* with r 2k+l = 1. Then r is always a 

2 k + l 

(2 k+l — l)-th power in GF(2 2fc ) unless (k + l)/d is even and r^+T ^ 1. 

Proof. Note that (k + l)/d is even if and only if both n and l/d are odd 
which is equivalent to d% = 2d. In all other cases, d\ = d. Let £ be a 
primitive element of GF(2 2fc ). Then r = ^ 2 for some i G {1, . . . , 2 fc + 1} 
and r is a (2 fc+ ' — l)-th power in GF(2 2fc ) if and only if there exists some 
j G {1, • • • , fjff } with r = £( 2dl ~ 1 )i since gcd(2 fc+/ - 1, 2 2fc - 1) = 2 dl - 1. 
Now note that if d\ = d then for any 2G{l,...,2 /c + l} there exists some j 
with (2 k - l)i = (2 dl - l)j (mod 2 2fc - 1) since gcd(2 dl - 1, 2 2fc - 1) = 2 d - 1 
divides (2 k — 1). If cZx = 2<i then the above equivalence is solvable for j if and 
only if gcd(2 dl - 1, 2 2fc - 1) = 2 2d - 1 divides (2 k - 1)1 The latter holds if and 
only if 2 d + 1 divides i since gcd(2 d + 1, 2 k - 1) = 1. Thus r = £(2 fe -i)(2 d +i)* 

k 2 k + l 

for some t G {1, . . . , ^jTj"} which is equivalent to r^ d + 1 =1. □ 

Proposition 9 For any a G GF(2 fc )*, take polynomials Q a (x) and f(y) over 

GF(2 2fc ) defined in Wtyi and respectively. If(k + l)/d is even andr^ d +^ = 
1 then exactly one of the following holds 

(i) f(y) has one zero in GF(2 2fc ) and Q a (x) has 2 2d zeros in GF(2 2fc ); 

(ii) f(y) has two zeros in GF(2 2fc ) and Q a (x) has one zero in GF(2 2fc ); 
(hi) f (y) has 2 2d + 1 zeros in GF(2 2fc ) and Q a (x) has 2 M zeros in GF(2 2fe ); 

If (k + l)/d is odd then either 
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(i) f(y) has 2 d + 1 zeros in GF(2 2fc ) and Q a {x) has 2 2d zeros in GF{2 2k ) 
or; 

(ii) f(y) has none or two zeros in GF(2 2k ) and Q a {x) has one zero in 
GF(2 2fe ). 

Proof. Recall that f(y) is obtained from Q a (x)/x using the substitution 
y = (ra)~ 1 x 2k+l ~ l (there is also the multiplicative constant that does not 
affect the number of zeros). By Theorem El f(y) has 0, 1, 2 or 2 dl + 1 zeros 
in GF(2 2fc ). Since raising elements of GF(2 2fc ) to the power of {2 k+l — 1) is a 
(2 dl — l)-to-l mapping, polynomial Q a {x) can not have more than 2 2dl zeros 
in GF(2 2fc ). Also, since zeros of Q a (x) in GF(2 2fe ) form a vector space over 
GF(2 dl ) then Q a (x) has 1, 2 dl or 2 2dl zeros in GF(2 2fc ). Note that d\ = d 
unless (k + l)/d is even which gives d\ = 2d. 

Assume (k + l)/d is even and Z n (a) ^ where Z n (x) comes from fl7|) (note 
that 2kjd\ = n). In this case, 

N^(a) = N 2 ^(a)=N^(a)GGF(2 rf ) 

since gcd(2d, k) = d, and Tr dl (N 2 ^(a)/Z 2 (a)) = since Z n (a) E GF(2 d ). 
Therefore, by Propositions [2] and [31 f(y) always has a zero in GF(2 2fc ). 

Now assume f(y) has exactly one zero in GF(2 2fc ) when (k + l)/d is odd 
(note that d\ — d). By Theorem [21 this is equivalent to 

= yaif [a-t y J = a 2 y + a x y + a 1 y 

having 2 d zeros in GF(2 2fc ). Then there exists some V G GF(2 2fc )* with 
G{V) = and all zeros of G(y) are exactly {/iV | fi G GF(2 d )}. Note 
that G(V 2fc ) = G{V) 2 " = since a G GF(2 fc ) and, thus, V 2 "'- 1 G GF(2 d ). 
Take ^ being a primitive element of GF(2 2fc ) and assume V = Then 
V 2 "- 1 G GF(2 d ) if and only if 2 2fc - 1 divides i{2 k - \){2 d - 1) which is 
equivalent to 2 k + 1 divide i{2 d — 1) and, further, to 2 k + 1 divide i since 

gcd(2 fc + 1, 2 d - 1) = 1. Therefore, V G GF(2 fc )* and Tr 2fc (aiV- (2fc+i+1) ) = 

which contradicts to the trace condition from Theorem [2] dH]). Thus, f(y) 
can not have exactly one zero in GF(2 2fc ) under these conditions. 

Assume f(y) has exactly one or 2 dl + 1 zeros in GF(2 2fc ) and u is one 
of them. Then, by Theorem [21 there exists some v G GF(2 2fc ) with u = 
cii 1 v 2k+l ~ 1 and the corresponding g{v) = 0. In this case, equation u = 
(ra)~ 1 x 2 + _1 is solvable for x if and only if r is a (2 k+l — l)-th power in 
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GF(2 2fe ), every solution is a zero of Q a (x) and all zeros are obtained this 
way from some u. Thus, by Lemma El Q a {x)/x has respectively 2 dl — 1 or 

2 k + l 

2 2dl — 1 zeros in GF(2 2/c ) unless (k + l)/d is even and r 2d +i ^ 1. In the 
remaining case, Q a (x)/x has none zeros in GF(2 2k ). This also means that in 
this case, Q a (x) can not have 2 2dl zeros in GF(2 2fc ) since this leads to f(y) 
having 2 dl + 1 zeros. 

Assume f(y) has exactly two zeros in GF(2 2fc ) (let u is one of them) and 
consider the cases when r is a {2 k+l — l)-th power in GF(2 2/c ). Then, by 
Theorem [2] ua\ = x 2 ^ 1 ' 1 is not solvable for x in GF(2 2fc ). Therefore, 
ura = uaxa~ 2 + +1 r is not a (2 k+l — l)-th power in GF(2 2fc ) and Q a (x)/x has 
none zeros in GF(2 2fc ). □ 

2 k + l 

If (k + l)/d is even and r 2d + 1 ^ 1 then 

(i) f(y) has one or 2 2d + 1 zeros in GF(2 2fc ) and Q a (x) has one zero in 
GF(2 2fc ); 

(ii) f(y) has two zeros in GF(2 2fc ), Y n (a) ^ and Q a {x) has one zero in 
GF(2 2fc ); 

(hi) f(y) has two zeros in GF(2 2fe ), Y n (a) = and Q a (x) has 2 2d zeros in 
GF(2 2fc ). 

2 k + l 

Note that if (k + l)/d is even, r 2d + 1 ^ 1 and Z n (a) = (the latter, by 
Note [T] and Propositions @] and El is equivalent to f(y) having 1 or 2 dl + 1 
zeros) then Q a (x) has one zero in GF(2 2fc ) (observe that 2kjd\ = n). 

For < j < i and u G GF(2 fc ), let D^ 1 denote a three-diagonal matrix of 
size i — j + 2 that contains ones on the main diagonal and with 

D^(t, t + l) = r^ + ] )j+t "u j+t and D^(t + l,t) = r^ +t Uj+t 

for t = 0, . . . , i — j, where indices of u are reduced modulo n, indices of r 

are reduced using the rule r tn +i = r\ (i = 0, . . . , n — 1 and t > 0), rows 
and columns of D\i % are numbered from to % — j + 1. The determinant of 
Dii\ denoted as A' u (j,i), can be computed expanding by minors along the 
last row to obtain 

K(j,i) = A' u (j, i -l) + u 2 A' u (j,z-2) 

assuming A' u (j,i) = 1 if % — j e {—2, —1}. Comparing the latter recursive 
identity with (fllil it is easy to see that 

A / U (j,z) = A u (j,i) . (31) 
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Proposition 10 Let (k + l)/d be even and take any a G GF(2 k )* . Then 
Q a {x) = has exactly one root in GF(2 2fc ) that is equal to zero if Z^(a) ^ 

2 k + l 

Nj(a)(d~ + S" 1 ), where 5 = r2 d +i G GF(2 2d ) is a (2 d + l)-th root of unity over 
GF(2) and Z n [x) comes from (?p. 

Proof. Note that 5 + S' 1 e GF(2 d ) and thus, Y n (u) e GF(2 d ) for any 
u E GF(2 k ) since Zju) E GF(2 d ). 

Obviously, Q a (0) = and we have to show that this is the only zero of 
Q a (x) in GF(2 2fc ) if Y n (a) ^ 0. Taking equation Q a (x) = and all its 2 2H 
powers we obtain n equations 

Q a (x) = x +r 2 i + ia 2 i + ix +r 2 ia 2 iX =0 for i — 0, . . . , n-1 , 

where indices of a are reduced modulo n and indices of r are reduced using the 

ry\tl/d 

rule r tn+i —r\ (i — 0, . . . , n — 1 and t > 0). If x 2i {% — 0, . . . , n — 1) are 
considered as independent variables then matrix Ai n of the obtained system 
of n linear equations with n unknowns consists of three cyclic antidiagonals 
and 

M n (i,(n-3)/2-i) = 1 , 
M n (i,n - i- 1) = r 2i a 2 i , 

M n (i,n - i - 2) = r 2i+l a 2i+ i for z = 0, ...,n-l, 

where rows and columns of A^ n (i, j) are numbered from to n - 1 and all 
elements of M. n are indexed modulo n. 

Now permute the columns and rows of M. n in the following way. Decimate 
the rows as i(n + l)/2 and columns as (n — 3)/2 + i{n — l)/2 modulo n for 
i = 0, . . . ,n- 1 (note that gcd((n + l)/2, n) = gcd((n - l)/2, n) = 1). Then 
the obtained matrix M.' n is three-diagonal cyclic with 

A<(z, z) = M n (i(n + l)/2, (n - 3)/2 + i(n - l)/2) = 1 , 
M' n (i, i - 1) = -M„(*> + l)/2, (n - 3)/2 + (i - l)(n - l)/2) = r i(n+1) a l(n+1) , 
A^;(i, z + 1) = M„(i(n + l)/2, (n - 3)/2 + (i + l)(n - l)/2) = r i(n+1)+1 a i{n+1)+1 

for «' = 0, . . . , n — 1 (indices of r and a are calculated modulo 2n) since 

z(n + l)/2 + (n - 3) /2 + i(n - l)/2 = (n - 3) /2 + in=(n- 3) /2 (mod n) , 
i(n + l)/2 + (n - 3)/2 + (i - l)(n - l)/2 = -1 + m = n - 1 (mod n) , 
i(n + l)/2 + (n - 3)/2 + (i + l)(n -l)/2 = n- 2 + zn = n- 2 (mod n) . 
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Also note that a 



i(n+l) 



di since a G GF(2 nfc ) and r^n+i) 



r; since 



1 for any i > 0. Then for i = 0, . . . , n — 1 



M' n (i, i + 1) = r^ +1 1)l a i+ i and A4^(i + 1, i) 



r 



(_l)i+l 

i+1 SO 



/ 



r^x 



r a 


-i 



\ 



1 



/ 



'•. 1 

V r o lfl o ■ ■ • r n _ia n _i 

Note that a principal submatrix obtained by deleting the last column and 
the last row from hA' n is exactly D\' n ~ 2 . 

We also have to apply the decimation (n — 3)/2 + i(n — l)/2 modulo n 
for i = 0, ... ,n — 1 (used to permute the columns of A4) to the vector of 
unknowns (z 2 ( n -i) , z 2 ( n -2) , ■■■,z 2 , z ). This results in z = (z n+1 , z 2 , z n+3 , 
z n -ii z o) T , where the increment for the index of z is equal to n — 1 starting 
from and going right to left (indices are calculated modulo 2n). Now, if 
= (0, . . . , 0) T then a new system has the following matrix representation 



MLz = 



(32) 



The determinant of M. n is equal to the determinant of Ai' n and can be 
computed expanding the latter by minors along the last row. Doing this it 
is easy to see that 



n-2 



detM' 



A' (1,72 -2)+ TV 



-l^n-l 



r »><< iX(i-''- ; n + n 



i=0 



ra-1 



+ r^ao r a A' a (2, n - 2) + JJ 



i=i 



Z^(a)+Nf(a)(5 + 5- 



YJa) 



Thus, if Y n (a) ^ then (132]) has only zero solution. Now note that every 
v G GF(2 2nfc ) with Q a {v) = provides a solution to the system given by 
v 2i = v 2 1 for i = 0, . . . , n — 1. Therefore, if Y n (a) ^ then <3 a (z) has at 
most one zero. □ 
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7. Conclusion 

We studied the polynomials P a (x) = x 2 ' +1 + x + a over GF(2 fc ) with I < k 
and proved some new criteria for the number of zeros of P a (x) in GF(2 fe ). In 
particular, the number of zeros and the trace of the value of the polynomial, 
due to Dobbertin, in point a~ l are related when gcd(/, k) = 1. In case when 
there is a unique zero or exactly two zeros and gcd(/, k) is odd, we provided 
explicit expressions for calculating these roots as polynomials of a. We also 
found the distribution of the number of zeros of P a {x). Finally, we studied 
the affine polynomial F a (x) = a 2 x 2 + x 2 + ax + c with c G GF(2 gcd<7 ' fc )), 
which was shown to be closely related to P a (x). In many cases, we were able 
to provide explicit expressions for calculating zeros of F a (x). 

References 

[1] J. F. Dillon, Geometry, codes and difference sets: Exceptional connec- 
tions, in: Akos Seress, K. T. Arasu (Eds.), Codes and Designs, Vol. 10 
of Ohio State University Mathematical Research Institute Publications, 
Walter de Gruyter, Berlin, 2002, pp. 73-85. 

[2] H. Dobbertin, P. Felke, T. Helleseth, P. Rosendahl, Niho type cross- 
correlation functions via Dickson polynomials and Kloosterman sums, 
IEEE Trans. Inf. Theory 52 (2) (2006) 613-627. 

[3] T. Helleseth, A. Kholosha, G. J. Ness, Characterization of m-sequences 
of lengths 2 2k — 1 and 2 k — 1 with three-valued crosscorrelation, IEEE 
Trans. Inf. Theory 53 (6) (2007) 2236-2245. 

[4] T. Helleseth, A. Kholosha, m-sequences of lengths 2 2k — 1 and 2 k — 1 with 
at most four-valued cross correlation, in: S. W. Golomb, M. G. Parker, 
A. Pott, A. Winterhof (Eds.), Sequences and Their Applications - SETA 
2008, Vol. 5203 of Lecture Notes in Computer Science, Springer- Verlag, 
Berlin, 2008, pp. 106-120. 

[5] A. W. Bluher, On x q+l + ax + b, Finite Fields and Their Applications 
10 (3) (2004) 285-305. 

[6] R. Lidl, G. L. Mullen, G. Turnwald, Dickson Polynomials, Vol. 65 of Pit- 
man monographs and surveys in pure and applied mathematics, Long- 
man Scientifc and Technical, Harlow, 1993. 



41 



[7] J. F. Dillon, H. Dobbertin, New cyclic difference sets with Singer pa- 
rameters, Finite Fields and Their Applications 10 (3) (2004) 342-389. 

[8] T. Helleseth, A. Kholosha, On the equation x 2 ' +1 + x + a = over 
GF(2 fc ), Finite Fields and Their Applications 14 (1) (2008) 159-176. 

[9] H. Dobbertin, Kasami power functions, permutation polynomials and 
cyclic difference sets, in: A. Pott, P. V. Kumar, T. Helleseth, D. Jung- 
nickel (Eds.), Difference Sets, Sequences and their Correlation Prop- 
erties, Vol. 542 of NATO Science Series, Series C: Mathematical and 
Physical Sciences, Kluwer Academic Publishers, Dordrecht, 1999, pp. 
133-158. 

[10] V. P. Il'in, Y. I. Kuznetsov, Three-Diagonal Matrices and their Appli- 
cations, Nauka, Moscow, 1985, (in Russian). 

[11] T. Helleseth, V. Zinoviev, Codes with the same coset weight distribu- 
tions as the Z 4 -linear Goethals codes, IEEE Trans. Inf. Theory 47 (4) 
(2001) 1589-1595. 

[12] R. Lidl, H. Niederreiter, Finite Fields, Vol. 20 of Encyclopedia of Math- 
ematics and its Applications, Cambridge University Press, Cambridge, 
1997. 



42 



